Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1320d79e-617c-4af5-9aeb-3946327a4c10/12fd2c549742521da66b6716832087fbfe161f15a3c7169f77.cer
File:                     12fd2c549742521da66b6716832087fbfe161f15a3c7169f77.cer (raw, json)
Hash identifier:          61DU+Pc14iExOiui8QSs6cWwOzijufMyQrFe7gznKQQ=
Subject key identifier:   96:74:74:21:88:93:CA:3A:EC:5B:AE:58:8F:B3:24:63:2A:EF:DA:80
Authority key identifier: 8F:65:7E:3F:A2:FB:F1:88:36:FA:5F:AF:09:1E:26:60:A2:AF:78:C5
Certificate issuer:       /CN=1320d79e-617c-4af5-9aeb-3946327a4c10
Certificate serial:       010D0C9F43285849AFA4656A5BACB67CB93D2C00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1320d79e-617c-4af5-9aeb-3946327a4c10.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/097b66f75e13414693e202b15a5ad865/0/967474218893CA3AEC5BAE588FB324632AEFDA80.mft
caRepository:             rsync://rpki-rps.arin.net/repository/097b66f75e13414693e202b15a5ad865/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Tue 29 Apr 2025 10:51:31 +0000
Certificate not after:    Mon 02 Aug 2027 10:51:31 +0000
Subordinate resources:    IP: 173.214.216.0/22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1320d79e-617c-4af5-9aeb-3946327a4c10/1320d79e-617c-4af5-9aeb-3946327a4c10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1320d79e-617c-4af5-9aeb-3946327a4c10/1320d79e-617c-4af5-9aeb-3946327a4c10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1320d79e-617c-4af5-9aeb-3946327a4c10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:af:a4:65:6a:5b:ac:b6:7c:b9:3d:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1320d79e-617c-4af5-9aeb-3946327a4c10
        Validity
            Not Before: Apr 29 10:51:31 2025 GMT
            Not After : Aug  2 10:51:31 2027 GMT
        Subject: CN=12fd2c549742521da66b6716832087fbfe161f15a3c7169f77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b3:cb:00:2b:51:03:85:46:96:bb:1d:77:91:
                    e8:86:84:41:1e:f8:83:90:ba:ed:d7:fb:48:d7:aa:
                    2f:07:f9:19:f5:40:14:5a:88:f9:4f:44:96:c0:16:
                    0b:d8:47:1f:ed:62:08:4e:03:45:30:27:17:92:2f:
                    62:22:2b:a7:59:c6:f7:7c:66:51:72:58:c6:78:91:
                    a0:c7:f2:12:c2:aa:16:e4:2c:f9:3f:9e:44:5e:2e:
                    bf:df:7c:d2:e8:15:7d:51:0c:99:7b:26:30:59:b4:
                    da:b4:b5:99:9c:37:6a:7c:e5:ae:42:cc:ab:e8:2b:
                    f0:c2:84:88:81:d9:01:df:6c:8e:b9:c9:61:58:6a:
                    53:dc:18:9a:5f:a5:83:a4:f0:20:1f:1b:25:58:86:
                    2e:cf:fc:33:1a:39:dd:44:0c:48:55:ad:86:62:af:
                    e6:91:84:0e:08:86:eb:bf:2b:19:cf:ba:35:25:2a:
                    32:b3:f4:b9:6f:8d:ea:6a:79:c6:31:f3:56:32:63:
                    14:cf:c9:ff:ca:c8:08:da:25:53:41:93:82:00:41:
                    fe:53:ed:75:42:5a:46:43:0c:0a:b1:04:c8:b5:04:
                    b6:11:8a:7b:b1:82:a9:48:d7:95:9a:8c:42:c6:6f:
                    e2:24:0e:b4:f9:dc:6a:30:55:f6:f8:67:d5:a3:ee:
                    8e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:74:74:21:88:93:CA:3A:EC:5B:AE:58:8F:B3:24:63:2A:EF:DA:80
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/097b66f75e13414693e202b15a5ad865/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/097b66f75e13414693e202b15a5ad865/0/967474218893CA3AEC5BAE588FB324632AEFDA80.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1320d79e-617c-4af5-9aeb-3946327a4c10/1320d79e-617c-4af5-9aeb-3946327a4c10.crl

            X509v3 Authority Key Identifier:
                keyid:8F:65:7E:3F:A2:FB:F1:88:36:FA:5F:AF:09:1E:26:60:A2:AF:78:C5

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1320d79e-617c-4af5-9aeb-3946327a4c10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.214.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:26:4b:6f:ce:8c:95:de:21:9d:21:41:0e:4a:3e:f3:a8:e4:
         f7:fe:fe:3a:8d:8d:e5:0d:85:23:c6:b0:fc:6e:a8:d1:3c:83:
         5d:8b:50:3a:93:c9:1d:c3:01:90:af:8a:99:5a:50:5d:52:48:
         5a:ce:f6:5f:6b:aa:01:c2:7d:f5:5e:1b:bf:15:d1:56:6b:27:
         11:57:f7:26:f3:d6:9c:a9:65:b1:17:d5:05:f6:fa:da:24:ef:
         1a:fc:68:bf:83:7f:f8:f8:68:9d:96:88:00:3d:3f:61:f6:b0:
         13:43:4e:60:cc:b2:f4:f5:eb:47:6c:99:d6:cc:ee:d3:d7:da:
         b0:1f:4a:5e:f5:61:52:4a:f5:16:59:6c:b5:79:fd:54:0a:f8:
         09:3f:ce:ba:b8:29:eb:29:32:0e:4a:a1:5d:1e:d5:ab:7c:2c:
         f6:1c:6f:6a:2d:1c:43:d4:3e:89:60:37:e6:af:68:29:20:0e:
         8f:e9:11:42:e4:27:89:d1:51:53:57:eb:b1:c7:69:30:38:df:
         da:4b:80:fa:ee:bb:3b:b0:bd:31:99:6a:1f:77:7a:0f:05:a9:
         6a:96:fa:be:a3:45:0d:94:98:79:11:ff:8d:c6:fd:eb:33:3c:
         03:c0:73:1a:37:ec:ac:88:94:d8:d1:b1:00:b8:e9:5c:51:7f:
         79:3b:52:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:27:42 2025 by rpki-client